kolaente fd452b9cb6 fix(auth): skip profile updates for disabled LDAP users ...

When a disabled/locked LDAP user authenticates, return early from
getOrCreateLdapUser without updating their profile info or syncing
avatar. The login handler already rejects them, but this avoids
unnecessary database writes.

Ref: GHSA-94xm-jj8x-3cr4

2026-03-23 16:37:26 +00:00

..

ldap_test.go

fix: use caller's session in LDAP syncUserGroups to avoid nested transactions

2026-02-25 11:03:02 +01:00

ldap.go

fix(auth): skip profile updates for disabled LDAP users

2026-03-23 16:37:26 +00:00

main_test.go

feat: move to slog for logging

2025-07-21 18:15:39 +02:00